Extract to table

Regulation 6(1) provides that a person shall not store or gain access to information stored in the terminal equipment of a subscriber or user unless the requirements of Regulation 6(2) are met

" Where consent is relied upon as the legal basis for processing under Article 6(1)(a), the controller must be able to demonstrate that the data subject has consented (Article 7(1)), and the data subject must have the right to withdraw consent at any time, with withdrawal being as easy as giving consent (Article 7(3))

Requiring 4 or more clicks to withdraw consent, compared to a single click to accept all cookies, contravenes the principle in Article 7(3) that it must be as easy to withdraw consent as to give it